From paul.hoffman@vpnc.org Tue Apr 5 17:50:23 2011 Return-Path: X-Original-To: smime@core3.amsl.com Delivered-To: smime@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id AAB133A69A0 for ; Tue, 5 Apr 2011 17:50:23 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.08 X-Spam-Level: X-Spam-Status: No, score=-102.08 tagged_above=-999 required=5 tests=[AWL=0.519, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id aVbfkzwspyj4 for ; Tue, 5 Apr 2011 17:50:22 -0700 (PDT) Received: from hoffman.proper.com (IPv6.Hoffman.Proper.COM [IPv6:2001:4870:a30c:41::81]) by core3.amsl.com (Postfix) with ESMTP id 8114A3A6824 for ; Tue, 5 Apr 2011 17:50:22 -0700 (PDT) Received: from [10.20.30.150] (75-101-30-90.dsl.dynamic.sonic.net [75.101.30.90]) (authenticated bits=0) by hoffman.proper.com (8.14.4/8.14.3) with ESMTP id p360q3EJ077037 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=NO) for ; Tue, 5 Apr 2011 17:52:04 -0700 (MST) (envelope-from paul.hoffman@vpnc.org) From: Paul Hoffman Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable Date: Tue, 5 Apr 2011 17:52:03 -0700 References: <20110406003409.BD58BE077C@rfc-editor.org> To: smime@ietf.org Message-Id: <1CC33319-F8B6-45F4-8098-8A8E8FB8F446@vpnc.org> Mime-Version: 1.0 (Apple Message framework v1084) X-Mailer: Apple Mail (2.1084) Subject: [smime] Fwd: RFC 6210 on Experiment: Hash Functions with Parameters in the Cryptographic Message Syntax (CMS) and S/MIME X-BeenThere: smime@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: SMIME Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 06 Apr 2011 00:50:23 -0000 > From: rfc-editor@rfc-editor.org > Date: April 5, 2011 5:34:09 PM PDT > To: ietf-announce@ietf.org, rfc-dist@rfc-editor.org > Cc: rfc-editor@rfc-editor.org > Subject: RFC 6210 on Experiment: Hash Functions with Parameters in the = Cryptographic Message Syntax (CMS) and S/MIME >=20 >=20 > A new Request for Comments is now available in online RFC libraries. >=20 >=20 > RFC 6210 >=20 > Title: Experiment: Hash Functions with Parameters=20 > in the Cryptographic Message Syntax (CMS)=20 > and S/MIME=20 > Author: J. Schaad > Status: Experimental > Stream: IETF > Date: April 2011 > Mailbox: ietf@augustcellars.com > Pages: 14 > Characters: 28339 > Updates/Obsoletes/SeeAlso: None >=20 > I-D Tag: draft-schaad-smime-hash-experiment-06.txt >=20 > URL: http://www.rfc-editor.org/rfc/rfc6210.txt >=20 > New hash algorithms are being developed that may include parameters. > Cryptographic Message Syntax (CMS) has not currently defined any hash > algorithms with parameters, but anecdotal evidence suggests that > defining one could cause major problems. This document defines just > such an algorithm and describes how to use it so that experiments can > be run to find out how bad including hash parameters will be. =20 > This document defines an Experimental Protocol for the Internet > community. >=20 >=20 > EXPERIMENTAL: This memo defines an Experimental Protocol for the > Internet community. It does not specify an Internet standard of any > kind. Discussion and suggestions for improvement are requested. > Distribution of this memo is unlimited. From paul.hoffman@vpnc.org Tue Apr 5 17:50:51 2011 Return-Path: X-Original-To: smime@core3.amsl.com Delivered-To: smime@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 4239E3A6834 for ; Tue, 5 Apr 2011 17:50:51 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -101.784 X-Spam-Level: X-Spam-Status: No, score=-101.784 tagged_above=-999 required=5 tests=[AWL=0.215, BAYES_00=-2.599, J_CHICKENPOX_93=0.6, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id z6CwMjtMAStl for ; Tue, 5 Apr 2011 17:50:50 -0700 (PDT) Received: from hoffman.proper.com (IPv6.Hoffman.Proper.COM [IPv6:2001:4870:a30c:41::81]) by core3.amsl.com (Postfix) with ESMTP id E71AD3A682B for ; Tue, 5 Apr 2011 17:50:49 -0700 (PDT) Received: from [10.20.30.150] (75-101-30-90.dsl.dynamic.sonic.net [75.101.30.90]) (authenticated bits=0) by hoffman.proper.com (8.14.4/8.14.3) with ESMTP id p360q3EK077037 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=NO) for ; Tue, 5 Apr 2011 17:52:32 -0700 (MST) (envelope-from paul.hoffman@vpnc.org) From: Paul Hoffman Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable Date: Tue, 5 Apr 2011 17:52:32 -0700 References: <20110406003421.A3A6BE077E@rfc-editor.org> To: smime@ietf.org Message-Id: <2E2C1A42-BEB5-4397-91F5-379F0EEBB632@vpnc.org> Mime-Version: 1.0 (Apple Message framework v1084) X-Mailer: Apple Mail (2.1084) Subject: [smime] Fwd: RFC 6211 on Cryptographic Message Syntax (CMS) Algorithm Identifier Protection Attribute X-BeenThere: smime@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: SMIME Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 06 Apr 2011 00:50:51 -0000 Begin forwarded message: > From: rfc-editor@rfc-editor.org > Date: April 5, 2011 5:34:21 PM PDT > To: ietf-announce@ietf.org, rfc-dist@rfc-editor.org > Cc: rfc-editor@rfc-editor.org > Subject: RFC 6211 on Cryptographic Message Syntax (CMS) Algorithm = Identifier Protection Attribute >=20 >=20 > A new Request for Comments is now available in online RFC libraries. >=20 >=20 > RFC 6211 >=20 > Title: Cryptographic Message Syntax (CMS) Algorithm=20 > Identifier Protection Attribute=20 > Author: J. Schaad > Status: Standards Track > Stream: IETF > Date: April 2011 > Mailbox: ietf@augustcellars.com > Pages: 11 > Characters: 22646 > Updates/Obsoletes/SeeAlso: None >=20 > I-D Tag: draft-schaad-smime-algorithm-attribute-05.txt >=20 > URL: http://www.rfc-editor.org/rfc/rfc6211.txt >=20 > The Cryptographic Message Syntax (CMS), unlike X.509/PKIX > certificates, is vulnerable to algorithm substitution attacks. In an > algorithm substitution attack, the attacker changes either the > algorithm being used or the parameters of the algorithm in order to > change the result of a signature verification process. In X.509 > certificates, the signature algorithm is protected because it is > duplicated in the TBSCertificate.signature field with the proviso > that the validator is to compare both fields as part of the signature > validation process. This document defines a new attribute that > contains a copy of the relevant algorithm identifiers so that they > are protected by the signature or authentication process. > [STANDARDS-TRACK] >=20 > This is now a Proposed Standard Protocol. >=20 > STANDARDS TRACK: This document specifies an Internet standards track > protocol for the Internet community,and requests discussion and = suggestions > for improvements. Please refer to the current edition of the Internet > Official Protocol Standards (STD 1) for the standardization state and > status of this protocol. Distribution of this memo is unlimited. From paul.hoffman@vpnc.org Tue Apr 12 07:47:26 2011 Return-Path: X-Original-To: smime@ietfc.amsl.com Delivered-To: smime@ietfc.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfc.amsl.com (Postfix) with ESMTP id EC4E7E07BB for ; Tue, 12 Apr 2011 07:47:26 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -101.251 X-Spam-Level: X-Spam-Status: No, score=-101.251 tagged_above=-999 required=5 tests=[AWL=0.748, BAYES_00=-2.599, J_CHICKENPOX_93=0.6, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([208.66.40.236]) by localhost (ietfc.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RBVyzhFE2YCR for ; Tue, 12 Apr 2011 07:47:26 -0700 (PDT) Received: from hoffman.proper.com (IPv6.Hoffman.Proper.COM [IPv6:2001:4870:a30c:41::81]) by ietfc.amsl.com (Postfix) with ESMTP id 44579E0705 for ; Tue, 12 Apr 2011 07:47:26 -0700 (PDT) Received: from [10.20.30.150] (75-101-30-90.dsl.dynamic.sonic.net [75.101.30.90]) (authenticated bits=0) by hoffman.proper.com (8.14.4/8.14.3) with ESMTP id p3CElOUf019742 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=NO) for ; Tue, 12 Apr 2011 07:47:25 -0700 (MST) (envelope-from paul.hoffman@vpnc.org) From: Paul Hoffman Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable Date: Tue, 12 Apr 2011 07:47:24 -0700 References: <20110411191952.E3B7DE0767@rfc-editor.org> To: smime@ietf.org Message-Id: <3E42E7B2-8320-40D6-93F7-439EA2B557C1@vpnc.org> Mime-Version: 1.0 (Apple Message framework v1084) X-Mailer: Apple Mail (2.1084) Subject: [smime] Fwd: RFC 6160 on Algorithms for Cryptographic Message Syntax (CMS) Protection of Symmetric Key Package Content Types X-BeenThere: smime@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: SMIME Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Apr 2011 14:47:27 -0000 Begin forwarded message: > From: rfc-editor@rfc-editor.org > Date: April 11, 2011 12:19:52 PM PDT > To: ietf-announce@ietf.org, rfc-dist@rfc-editor.org > Cc: rfc-editor@rfc-editor.org > Subject: RFC 6160 on Algorithms for Cryptographic Message Syntax (CMS) = Protection of Symmetric Key Package Content Types >=20 >=20 > A new Request for Comments is now available in online RFC libraries. >=20 >=20 > RFC 6160 >=20 > Title: Algorithms for Cryptographic Message Syntax=20 > (CMS) Protection of Symmetric Key Package=20 > Content Types=20 > Author: S. Turner > Status: Standards Track > Stream: IETF > Date: April 2011 > Mailbox: turners@ieca.com > Pages: 5 > Characters: 10115 > Updates/Obsoletes/SeeAlso: None >=20 > I-D Tag: draft-turner-cms-symmetrickeypackage-algs-00.txt >=20 > URL: http://www.rfc-editor.org/rfc/rfc6160.txt >=20 > This document describes the conventions for using several > cryptographic algorithms with the Cryptographic Message Syntax (CMS) > to protect the symmetric key package content type. Specifically, it > includes conventions necessary to implement SignedData, > EnvelopedData, EncryptedData, and AuthEnvelopedData. = [STANDARDS-TRACK] >=20 > This is now a Proposed Standard Protocol. >=20 > STANDARDS TRACK: This document specifies an Internet standards track > protocol for the Internet community,and requests discussion and = suggestions > for improvements. Please refer to the current edition of the Internet > Official Protocol Standards (STD 1) for the standardization state and > status of this protocol. Distribution of this memo is unlimited. From paul.hoffman@vpnc.org Tue Apr 12 07:47:43 2011 Return-Path: X-Original-To: smime@ietfc.amsl.com Delivered-To: smime@ietfc.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfc.amsl.com (Postfix) with ESMTP id EA4E5E07D7 for ; Tue, 12 Apr 2011 07:47:43 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -101.277 X-Spam-Level: X-Spam-Status: No, score=-101.277 tagged_above=-999 required=5 tests=[AWL=0.722, BAYES_00=-2.599, J_CHICKENPOX_93=0.6, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([208.66.40.236]) by localhost (ietfc.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Pj+jHo+ciZY9 for ; Tue, 12 Apr 2011 07:47:43 -0700 (PDT) Received: from hoffman.proper.com (IPv6.Hoffman.Proper.COM [IPv6:2001:4870:a30c:41::81]) by ietfc.amsl.com (Postfix) with ESMTP id 48E43E07D5 for ; Tue, 12 Apr 2011 07:47:43 -0700 (PDT) Received: from [10.20.30.150] (75-101-30-90.dsl.dynamic.sonic.net [75.101.30.90]) (authenticated bits=0) by hoffman.proper.com (8.14.4/8.14.3) with ESMTP id p3CElOUg019742 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=NO) for ; Tue, 12 Apr 2011 07:47:42 -0700 (MST) (envelope-from paul.hoffman@vpnc.org) From: Paul Hoffman Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable Date: Tue, 12 Apr 2011 07:47:42 -0700 References: <20110411192003.3F19CE076E@rfc-editor.org> To: smime@ietf.org Message-Id: <5E401DD2-150A-4351-8CC2-61FB4B90D7A2@vpnc.org> Mime-Version: 1.0 (Apple Message framework v1084) X-Mailer: Apple Mail (2.1084) Subject: [smime] Fwd: RFC 6161 on Elliptic Curve Algorithms for Cryptographic Message Syntax (CMS) Encrypted Key Package Content Type X-BeenThere: smime@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: SMIME Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Apr 2011 14:47:44 -0000 > From: rfc-editor@rfc-editor.org > Date: April 11, 2011 12:20:03 PM PDT > To: ietf-announce@ietf.org, rfc-dist@rfc-editor.org > Cc: rfc-editor@rfc-editor.org > Subject: RFC 6161 on Elliptic Curve Algorithms for Cryptographic = Message Syntax (CMS) Encrypted Key Package Content Type >=20 >=20 > A new Request for Comments is now available in online RFC libraries. >=20 >=20 > RFC 6161 >=20 > Title: Elliptic Curve Algorithms for Cryptographic=20 > Message Syntax (CMS) Encrypted Key Package=20 > Content Type=20 > Author: S. Turner > Status: Standards Track > Stream: IETF > Date: April 2011 > Mailbox: turners@ieca.com > Pages: 3 > Characters: 5504 > Updates: RFC6033 >=20 > I-D Tag: draft-turner-ekpct-algs-update-03.txt >=20 > URL: http://www.rfc-editor.org/rfc/rfc6161.txt >=20 > This document describes the conventions for using several Elliptic > Curve cryptographic algorithms with the Cryptographic Message Syntax > (CMS) encrypted key package content type. Specifically, it includes > conventions necessary to implement Elliptic Curve Diffie-Hellman > (ECDH) with EnvelopedData and Elliptic Curve Digital Signature > Algorithm (ECDSA) with SignedData. This document extends RFC 6033. > [STANDARDS-TRACK] >=20 > This is now a Proposed Standard Protocol. >=20 > STANDARDS TRACK: This document specifies an Internet standards track > protocol for the Internet community,and requests discussion and = suggestions > for improvements. Please refer to the current edition of the Internet > Official Protocol Standards (STD 1) for the standardization state and > status of this protocol. Distribution of this memo is unlimited. From paul.hoffman@vpnc.org Tue Apr 12 07:48:03 2011 Return-Path: X-Original-To: smime@ietfc.amsl.com Delivered-To: smime@ietfc.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfc.amsl.com (Postfix) with ESMTP id 37F51E07E7 for ; Tue, 12 Apr 2011 07:48:03 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -101.301 X-Spam-Level: X-Spam-Status: No, score=-101.301 tagged_above=-999 required=5 tests=[AWL=0.698, BAYES_00=-2.599, J_CHICKENPOX_93=0.6, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([208.66.40.236]) by localhost (ietfc.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GSeasVI+KeM4 for ; Tue, 12 Apr 2011 07:48:02 -0700 (PDT) Received: from hoffman.proper.com (IPv6.Hoffman.Proper.COM [IPv6:2001:4870:a30c:41::81]) by ietfc.amsl.com (Postfix) with ESMTP id 7F4F9E07E6 for ; Tue, 12 Apr 2011 07:48:02 -0700 (PDT) Received: from [10.20.30.150] (75-101-30-90.dsl.dynamic.sonic.net [75.101.30.90]) (authenticated bits=0) by hoffman.proper.com (8.14.4/8.14.3) with ESMTP id p3CElOUh019742 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=NO) for ; Tue, 12 Apr 2011 07:48:01 -0700 (MST) (envelope-from paul.hoffman@vpnc.org) From: Paul Hoffman Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable Date: Tue, 12 Apr 2011 07:48:01 -0700 References: <20110411192020.99CD4E0774@rfc-editor.org> To: smime@ietf.org Message-Id: Mime-Version: 1.0 (Apple Message framework v1084) X-Mailer: Apple Mail (2.1084) Subject: [smime] Fwd: RFC 6162 on Elliptic Curve Algorithms for Cryptographic Message Syntax (CMS) Asymmetric Key Package Content Type X-BeenThere: smime@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: SMIME Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Apr 2011 14:48:03 -0000 > From: rfc-editor@rfc-editor.org > Date: April 11, 2011 12:20:20 PM PDT > To: ietf-announce@ietf.org, rfc-dist@rfc-editor.org > Cc: rfc-editor@rfc-editor.org > Subject: RFC 6162 on Elliptic Curve Algorithms for Cryptographic = Message Syntax (CMS) Asymmetric Key Package Content Type >=20 >=20 > A new Request for Comments is now available in online RFC libraries. >=20 >=20 > RFC 6162 >=20 > Title: Elliptic Curve Algorithms for Cryptographic=20 > Message Syntax (CMS) Asymmetric Key Package=20 > Content Type=20 > Author: S. Turner > Status: Standards Track > Stream: IETF > Date: April 2011 > Mailbox: turners@ieca.com > Pages: 4 > Characters: 6155 > Updates: RFC5959 >=20 > I-D Tag: draft-turner-akf-algs-update-03.txt >=20 > URL: http://www.rfc-editor.org/rfc/rfc6162.txt >=20 > This document describes conventions for using Elliptic Curve > cryptographic algorithms with SignedData and EnvelopedData to protect > the AsymmetricKeyPackage content type. Specifically, it includes > conventions necessary to implement Elliptic Curve Diffie-Hellman > (ECDH) with EnvelopedData and Elliptic Curve Digital Signature > Algorithm (ECDSA) with SignedData. This document extends RFC 5959. > [STANDARDS-TRACK] >=20 > This is now a Proposed Standard Protocol. >=20 > STANDARDS TRACK: This document specifies an Internet standards track > protocol for the Internet community,and requests discussion and = suggestions > for improvements. Please refer to the current edition of the Internet > Official Protocol Standards (STD 1) for the standardization state and > status of this protocol. Distribution of this memo is unlimited. From prvs=30927f3b01=jherzog@ll.mit.edu Thu Apr 21 07:09:26 2011 Return-Path: X-Original-To: smime@ietfc.amsl.com Delivered-To: smime@ietfc.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfc.amsl.com (Postfix) with ESMTP id 26064E06F7 for ; Thu, 21 Apr 2011 07:09:26 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.222 X-Spam-Level: X-Spam-Status: No, score=-6.222 tagged_above=-999 required=5 tests=[AWL=-0.375, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4, SARE_OBFU_ALL=0.751, UNPARSEABLE_RELAY=0.001] Received: from mail.ietf.org ([208.66.40.236]) by localhost (ietfc.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id neYkzOUWBfeH for ; Thu, 21 Apr 2011 07:09:25 -0700 (PDT) Received: from mx2.ll.mit.edu (MX2.LL.MIT.EDU [129.55.12.46]) by ietfc.amsl.com (Postfix) with ESMTP id 6D8A9E0655 for ; Thu, 21 Apr 2011 07:09:25 -0700 (PDT) Received: from LLE2K7-HUB01.mitll.ad.local (LLE2K7-HUB01.mitll.ad.local) by mx2.ll.mit.edu (unknown) with ESMTP id p3LE9MLk002550; Thu, 21 Apr 2011 10:09:23 -0400 From: "Herzog, Jonathan - 0668 - MITLL" To: "smime@ietf.org" Date: Thu, 21 Apr 2011 10:09:21 -0400 Thread-Topic: New ID of possible interest Thread-Index: AcwALbZ5D0jQmrsvRUK501eSSz3YpA== Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: acceptlanguage: en-US Content-Type: multipart/signed; boundary="Apple-Mail-19-817730673"; protocol="application/pkcs7-signature"; micalg=sha1 MIME-Version: 1.0 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10432:5.2.15, 1.0.148, 0.0.0000 definitions=2011-04-21_02:2011-04-21, 2011-04-21, 1970-01-01 signatures=0 X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 spamscore=0 ipscore=0 suspectscore=7 phishscore=0 bulkscore=0 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=6.0.2-1012030000 definitions=main-1104210062 Cc: "Khazan, Roger - 0668 - MITLL" , "draft-herzog-withmac-keywrap@tools.ietf.org" Subject: [smime] New ID of possible interest X-BeenThere: smime@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: SMIME Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 21 Apr 2011 14:09:26 -0000 --Apple-Mail-19-817730673 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii I would like to inform the SMIME working group of a newly-submitted Internet Draft that may be of interest: The With-MAC key-wrapping algorithm for Cryptographic Message Syntax draft-herzog-withmac-keywrap-00 Abstract: This document describes a new key-wrapping algorithm to be used in the EnvelopedData, AuthenticatedData and AuthEnvelopedData structures of the Cryptographic Message Syntax. Because these structures do not provide data-origin authentication, a recipient cannot cryptographically verify that the plaintext received was the plaintext encapsulated by the message's original sender. The With- MAC key-wrapping algorithm allows an EncryptedKey value to hold both a wrapped symmetric key and a MAC value on the data to be authenticated. When used in EnvelopedData, AuthenticatedData and AuthEnvelopedData structures, therefore, these structures can achieve data-origin authentication (in some circumstances) using only symmetric-key algorithms. https://datatracker.ietf.org/doc/draft-herzog-withmac-keywrap/ A side note: this draft should probably be read in combination with our = previous draft on static-static ECDH = (https://datatracker.ietf.org/doc/draft-herzog-static-ecdh/). That draft = described how a sender might use a certified ECDH key to create an = EnvelopedData structure (for example). It is unclear, however, how such = a sender could also provide data-origin authentication without using = digital signatures. However, that requires a certified signature-capable = key, something they may not have. This draft provides an alternate = approach-- the sender provides a MAC value for each recipient. We welcome all comments and reviews. Thank you. --=20 Jonathan Herzog voice: = (781) 981-2356 Technical Staff fax: = (781) 981-7687 Cyber Systems and Technology Group email: = jherzog@ll.mit.edu MIT Lincoln Laboratory www: = http://www.ll.mit.edu/CST/ 244 Wood Street =20 Lexington, MA 02420-9185 --Apple-Mail-19-817730673 Content-Disposition: attachment; filename="smime.p7s" Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIJrzCCBNIw ggO6oAMCAQICChVM3JYAAAAAIh8wDQYJKoZIhvcNAQEFBQAwUTELMAkGA1UEBhMCVVMxHzAdBgNV BAoTFk1JVCBMaW5jb2xuIExhYm9yYXRvcnkxDDAKBgNVBAsTA1BLSTETMBEGA1UEAxMKTUlUTEwg Q0EtMTAeFw0xMDA1MjUyMDQ1MzhaFw0xMTA1MjUyMDQ1MzhaMGQxCzAJBgNVBAYTAlVTMR8wHQYD VQQKExZNSVQgTGluY29sbiBMYWJvcmF0b3J5MQ8wDQYDVQQLEwZQZW9wbGUxIzAhBgNVBAMTGkhl cnpvZy5Kb25hdGhhbi5DLjUwMDExMzA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA 93mr5a6zq6EQsVtIX9BadxwzpjabF8pvDmoMSP/ZhbWrncNJ1j7xiBGcihYqsDaQz9+hJITxi7IM NUx5fnFtOQRHZgkOCLR1URFc0AlJ3Pknv6XoQ4fqPODmSMB882c9l/8AbO7N/27r8n/V0Ip4Rpw8 1qnrDXk6UH/1zHlssGmlVng0RSREuQy98xPxzbLr5cOMWLwHs5OLNYcGv0KlD6rp1DPzJ3qplU/+ 0P2jyYbGyXStJ/h+3Kx5mOWFLB4j8HDyLG90ZHlZjZXo9FrSoFubVJK/mdVzIuXd00Ldl1fCyxhR D9elkpTc7xOLJsEzCCi8Gqo6eQuvz1RH93u3PwIDAQABo4IBlzCCAZMwDgYDVR0PAQH/BAQDAgbA MB0GA1UdDgQWBBRPjG6+CxR6H/o9vyq5PgmW9vmuajAfBgNVHSMEGDAWgBSUWsZYybYmm6AJe6gv ZJDDiQJuKjAzBgNVHR8ELDAqMCigJqAkhiJodHRwOi8vY3JsLmxsLm1pdC5lZHUvZ2V0Y3JsL0xM Q0ExMGIGCCsGAQUFBwEBBFYwVDAtBggrBgEFBQcwAoYhaHR0cDovL2NybC5sbC5taXQuZWR1L2dl dHRvL0xMQ0ExMCMGCCsGAQUFBzABhhdodHRwOi8vb2NzcC5sbC5taXQuZWR1LzAMBgNVHRMBAf8E AjAAMD0GCSsGAQQBgjcVBwQwMC4GJisGAQQBgjcVCIOD5R2H7Kdmhq2HFYPq8EWFtqEfHYXL3jKH /4pzAgFkAgEFMCIGA1UdJQEB/wQYMBYGCCsGAQUFBwMEBgorBgEEAYI3CgMMMBgGA1UdIAQRMA8w DQYLKoZIhvcSAgEDAQgwHQYDVR0RBBYwFIESamhlcnpvZ0BsbC5taXQuZWR1MA0GCSqGSIb3DQEB BQUAA4IBAQBI6aoe1c6Glzs3Hh/lIzf2TzmtZSQLl8UZaIFGi0zG0EjsO6wjX6bfv/WizE30OEef 6So76p0dNt7j21lrH+FGaH6r41ggikbkoazNkAePsQk0WPZhmpus1rByNUozK4KMPpzLAynHNd5m POtqoIwDiTEgktLuZ1nwU7bUHmv7BO14dkhLhMOFKRCIi3vqe9rDh9pTYt1YNhQe1fBme6Y5DWLA TxBBqErz05e7rVngKi6yk6j7cqWpiM6L93z2Zq5p9FqACsJHmMwxH/8XFeeXgFf/CKMAIuSZCGFU 29ouEZWL7LLu87SFGm3f/3sLS7xgXei7d/PlXte1HKKdKOCPMIIE1TCCA72gAwIBAgIKFU5e0QAA AAAiIDANBgkqhkiG9w0BAQUFADBRMQswCQYDVQQGEwJVUzEfMB0GA1UEChMWTUlUIExpbmNvbG4g TGFib3JhdG9yeTEMMAoGA1UECxMDUEtJMRMwEQYDVQQDEwpNSVRMTCBDQS0xMB4XDTEwMDUyNTIw NDcxN1oXDTExMDUyNTIwNDcxN1owZDELMAkGA1UEBhMCVVMxHzAdBgNVBAoTFk1JVCBMaW5jb2xu IExhYm9yYXRvcnkxDzANBgNVBAsTBlBlb3BsZTEjMCEGA1UEAxMaSGVyem9nLkpvbmF0aGFuLkMu NTAwMTEzMDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtC8sNdkCteQagOVEnQQs4 5uLqsmaOfjqTywNWuvaVj0F8Jsek8bOcuK4rlB1PrBk0Q+s/N4FVcGEn6BEDWRIDFaETVr1jweTE yRUtqngTIvpbpeixV37BcFkVnbV2VrZC5oaa0c0bkxXkuE0lohQS5AIBXQRADEJVnfXIM44yvsmo T7J5rdGwjIg4QJ2YA07po0JkbndcylcjU0zW2Lv432MEZrX/o+T0rraFAhT8A+8De9CIo0LJkXCK cNwk6LwuNKQS0qeezDo5wRiqZaht3ftiAuOImOxN44hxnDa2cHVbOFQ+pevN08gH7d39CVHUbHMC PnuIBoQNu61I2+ItAgMBAAGjggGaMIIBljAOBgNVHQ8BAf8EBAMCBSAwHQYDVR0OBBYEFEuYUJcI JTs8b2SWTJN28DD/qqsNMB8GA1UdIwQYMBaAFJRaxljJtiaboAl7qC9kkMOJAm4qMDMGA1UdHwQs MCowKKAmoCSGImh0dHA6Ly9jcmwubGwubWl0LmVkdS9nZXRjcmwvTExDQTEwYgYIKwYBBQUHAQEE VjBUMC0GCCsGAQUFBzAChiFodHRwOi8vY3JsLmxsLm1pdC5lZHUvZ2V0dG8vTExDQTEwIwYIKwYB BQUHMAGGF2h0dHA6Ly9vY3NwLmxsLm1pdC5lZHUvMAwGA1UdEwEB/wQCMAAwPQYJKwYBBAGCNxUH BDAwLgYmKwYBBAGCNxUIg4PlHYfsp2aGrYcVg+rwRYW2oR8dhevQcIPr7SACAWQCAQQwJQYDVR0l BB4wHAYEVR0lAAYIKwYBBQUHAwQGCisGAQQBgjcKAwQwGAYDVR0gBBEwDzANBgsqhkiG9xICAQMB CDAdBgNVHREEFjAUgRJqaGVyem9nQGxsLm1pdC5lZHUwDQYJKoZIhvcNAQEFBQADggEBAAmf5m3W 0Di4aQhLS1e2xejG3MQPQJvWL3dHbnHYG+NDVFWcuqyE5t73eb7nV2UyGRVHDt6MyIquedAPPm86 FSPZ6CUGGj5imp9pAu7C+xESBMY4z0k5htK/h5vlSB9X/i3JbXI8KBOioH1QYenMfrvTISmk/+5A BHsMDOpK7//bX66DP+iopoIiWJktY+dfiak7uTZhuYEOmICq4QlP9dDqdPiQGje4Y8xZ45YL6+2I m5GIzuIac/r51YTBuCk+TxTZIITMx+Fr50Ur6s4dOnvApxMR7iZX6oKnmVfXrjFMMQxR1TN5ISUn IoMyID3yCiInqQh6G3WPCAhwa/qG/moxggLJMIICxQIBATBfMFExCzAJBgNVBAYTAlVTMR8wHQYD VQQKExZNSVQgTGluY29sbiBMYWJvcmF0b3J5MQwwCgYDVQQLEwNQS0kxEzARBgNVBAMTCk1JVExM IENBLTECChVM3JYAAAAAIh8wCQYFKw4DAhoFAKCCAT8wGAYJKoZIhvcNAQkDMQsGCSqGSIb3DQEH ATAcBgkqhkiG9w0BCQUxDxcNMTEwNDIxMTQwOTIxWjAjBgkqhkiG9w0BCQQxFgQUrF5TjjbpNNOR o3j7eCM2P5a5hW0wbgYJKwYBBAGCNxAEMWEwXzBRMQswCQYDVQQGEwJVUzEfMB0GA1UEChMWTUlU IExpbmNvbG4gTGFib3JhdG9yeTEMMAoGA1UECxMDUEtJMRMwEQYDVQQDEwpNSVRMTCBDQS0xAgoV Tl7RAAAAACIgMHAGCyqGSIb3DQEJEAILMWGgXzBRMQswCQYDVQQGEwJVUzEfMB0GA1UEChMWTUlU IExpbmNvbG4gTGFib3JhdG9yeTEMMAoGA1UECxMDUEtJMRMwEQYDVQQDEwpNSVRMTCBDQS0xAgoV Tl7RAAAAACIgMA0GCSqGSIb3DQEBAQUABIIBAD7ARx3zlOX5yooWOcw8WEUouyWWI6m+pgexLtfn OaFdFVKvuYlhHfICrx0AJaX3KsauHBYlWdiK8PRvX71yfMRefcgc9vdP5PyZv3BC0zTjhSKXwcBu 0InUefUyRmTVcJi8/mOsjrM9mex3dFPAz4sst/ulyVVdUO08JIRx9O8cc7RggggEdgUHDEWEo8or CMTgrOJy4aITKVNAeHhzZfxjAYdaIgQdV4HTt7A5NlbBZxIrT1ixTIpVy69OliXuxrmrScjX+rK8 ys0R9aZnTnlm4GlDIeSc9XwI2nr3Wz2bYF7DPsr3xVUzBIb1x1mCPFPyQHwyWEb+6mzMb8apUQQA AAAAAAA= --Apple-Mail-19-817730673-- From turners@ieca.com Tue Apr 26 11:57:11 2011 Return-Path: X-Original-To: smime@ietfa.amsl.com Delivered-To: smime@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D577FE0715 for ; Tue, 26 Apr 2011 11:57:11 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.495 X-Spam-Level: X-Spam-Status: No, score=-102.495 tagged_above=-999 required=5 tests=[AWL=0.103, BAYES_00=-2.599, UNPARSEABLE_RELAY=0.001, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qNUFEwn2Ku5f for ; Tue, 26 Apr 2011 11:57:11 -0700 (PDT) Received: from nm25.bullet.mail.sp2.yahoo.com (nm25.bullet.mail.sp2.yahoo.com [98.139.91.95]) by ietfa.amsl.com (Postfix) with SMTP id 2B8C3E062B for ; Tue, 26 Apr 2011 11:57:11 -0700 (PDT) Received: from [98.139.91.66] by nm25.bullet.mail.sp2.yahoo.com with NNFMP; 26 Apr 2011 18:57:08 -0000 Received: from [98.139.91.17] by tm6.bullet.mail.sp2.yahoo.com with NNFMP; 26 Apr 2011 18:57:08 -0000 Received: from [127.0.0.1] by omp1017.mail.sp2.yahoo.com with NNFMP; 26 Apr 2011 18:57:08 -0000 X-Yahoo-Newman-Id: 61295.82970.bm@omp1017.mail.sp2.yahoo.com Received: (qmail 5281 invoked from network); 26 Apr 2011 18:57:08 -0000 Received: from thunderfish.local (turners@96.231.122.74 with plain) by smtp115.biz.mail.sp1.yahoo.com with SMTP; 26 Apr 2011 11:57:07 -0700 PDT X-Yahoo-SMTP: ZrP3VLSswBDL75pF8ymZHDSu9B.vcMfDPgLJ X-YMail-OSG: auSfCfkVM1mgsvc0AG6.D.WPoUhwDbqL28.MGl3dN2Jdhlq rJIs9bS_Y_0IunkMpmO_aGgE7WF5Khx9whvF.EiJH6kCR48vBR.6c_xsMTX8 wTm5du7pjiejUgxL4nigbMEgoIir18_JVUH8_q5zt4am8Agzjfi.GNqIUISe pBQExsV2Akb4L3RN6rX_IZpqnj1AS1tKew9BG7uF5Q8riAP9E_HbKtwp_5zZ bPtzwLvsQM0oEixAsBc0XLLISXXE0_LuJQ.tt5.bjjDyXos90_oplRpRGp2R bvMPigNPONdDpqgoHxy_mp7b5gFco2qTeDqAgXYeywwyh79K3rzaR7GvDOkH GXT_PSVWUCGVZkE72Uugg9fE4yOf2u8lXNyG6rSeH X-Yahoo-Newman-Property: ymail-3 Message-ID: <4DB71582.4050301@ieca.com> Date: Tue, 26 Apr 2011 14:57:06 -0400 From: Sean Turner User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.6; en-US; rv:1.9.2.15) Gecko/20110303 Lightning/1.0b2 Thunderbird/3.1.9 MIME-Version: 1.0 To: smime@ietf.org Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Subject: [smime] Fwd: Document Action: 'Suite B in Secure/Multipurpose Internet Mail Extensions (S/MIME)' to Informational RFC (draft-housley-rfc5008bis-01.txt) X-BeenThere: smime@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: SMIME Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 26 Apr 2011 18:57:12 -0000 FYI -------- Original Message -------- Subject: Document Action: 'Suite B in Secure/Multipurpose Internet Mail Extensions (S/MIME)' to Informational RFC (draft-housley-rfc5008bis-01.txt) Date: Tue, 26 Apr 2011 11:48:57 -0700 From: The IESG To: IETF-Announce CC: RFC Editor The IESG has approved the following document: - 'Suite B in Secure/Multipurpose Internet Mail Extensions (S/MIME)' (draft-housley-rfc5008bis-01.txt) as an Informational RFC This document has been reviewed in the IETF but is not the product of an IETF Working Group. The IESG contact person is Sean Turner. A URL of this Internet Draft is: http://datatracker.ietf.org/doc/draft-housley-rfc5008bis/ Technical Summary The United States Government has published guidelines for "NSA Suite B Cryptography", which defines cryptographic algorithm policy for national security applications. This document defines a profile of S/MIME which is conformant with Suite B. Working Group Summary This document is not the product of any IETF working group. Document Quality This document explains the requirements for as S/MIME implementation to be considered "Suite B conformant". There is strong consensus from the people that are defining "Suite B". Personnel Russ Housley (housley@vigilsec.com) is the document shepherd. Sean Turner (turners@ieca.com) is the responsible Area Director. _______________________________________________ IETF-Announce mailing list IETF-Announce@ietf.org https://www.ietf.org/mailman/listinfo/ietf-announce